virus name:trojan-PSW.Win32.OnLineGames.epmn
Risk level: Medium
Virus Description
The sample size is “25,600 bytes” , icon “
” ,virus extension “exe”, mainly through the “file bundle”, “web page linked to horse”, “download tools to download” to spread, the main purpose of the virus is to steal user XCB game account and password information.
While user’s computer infected , there will be computers and network running Slow, games, software error shut down for no reason and some other information.
Infected OS
Windows 2000/Windows XP / Windows 2003/Windows Vista / Windows 7
Transmission
Bundle file, web page linked to horse, download tools to download
Manually removal:
1, manually delete the following files:
Citizen Change installation directory \ GPKHelp.dll
Citizen Change installation directory \ binkw32.dll
Citizen Change installation directory \ test.bat
2, manually add the following file:
Change the original Star game installation directory \ binkw32.dll
Variable declaration:
% SystemDriver% system partition, usually “C: \”
% SystemRoot% WINDODWS directory, usually “C: \ Windows”
% Documents and Settings% user’s documents directory, usually “C: \ Documents and Settings”
% Temp% temp folder, usually “C: \ Documents and Settings \ current user name \ Local Settings \ Temp”
% ProgramFiles% system program the default installation directory, typically: “C: \ ProgramFiles”
Viruses create a file:
Citizen Change installation directory \ GPKHelp.dll
Citizen Change installation directory \ binkw32.dll
Citizen Change installation directory \ test.bat
Kitesurfing News…
[...]just below, are some totally unrelated sites to ours, however, they are definitely worth checking out[...]…
Read was interesting, stay in touch……
[...]please visit the sites we follow, including this one, as it represents our picks from the web[...]……
Websites worth visiting…
[...]here are some links to sites that we link to because we think they are worth visiting[...]……
Sites we Like……
[...] Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose [...]……
You should check this out…
[...] Wonderful story, reckoned we could combine a few unrelated data, nevertheless really worth taking a look, whoa did one learn about Mid East has got more problerms as well [...]……
Digg…
While checking out DIGG yesterday I noticed this…
Blogs ou should be reading…
[...]Here is a Great Blog You Might Find Interesting that we Encourage You[...]……
Online Article……
[...]The information mentioned in the article are some of the best available [...]……
Gems form the internet…
[...]very few websites that happen to be detailed below, from our point of view are undoubtedly well worth checking out[...]……
Superb website…
[...]always a big fan of linking to bloggers that I love but don’t get a lot of link love from[...]……
FoxTec…
[...]the time to read or visit the content or pages we have [...]…
Websites we think you should visit…
[...]although websites we backlink to below are considerably not related to ours, we feel they are actually worth a go through, so have a look[...]……
Marijuana News…
[...]while the web sites we link to below are completely unrelated to ours, we think they are worth a look, so have a look[...]…
Medical Marijuana…
[...]Here you will you’ll find a few links to some Cool web sites[...]…
Marijuana News…
[...]while the sites we link to below are completely unrelated to ours, we think they are worth a read, so have a look[...]…
Marijuana Reviews…
[...]just below, are some totally unrelated websites to our website, but, they are definitely worth checking out[...]…
Links…
[...]Sites of interest we have a link to[...]……
Sites we Like……
[...] Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose [...]……
Sites we Like……
[...] Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose [...]……
Sources…
[...]check below, are some totally unrelated websites to ours, however, they are most trustworthy sources that we use[...]……
Blogs ou should be reading…
[...]Here is a Great Blog You Might Find Interesting that we Encourage You[...]……
Online Article……
[...]The information mentioned in the article are some of the best available [...]……
Superb website…
[...]always a big fan of linking to bloggers that I love but don’t get a lot of link love from[...]……
kredi karti borcu taksitlendirme…
this was a sheer entertaining read. i enjoyed it very much!|Thanks for this article! How in the world…….
Websites you should visit…
[...]below you’ll find the link to some sites that we think you should visit[...]……
Visitor recommendations…
[...]one of our visitors recently recommended the following website[...]……
Trackback Link…
[...]Sites of interest we have a link to[...]……
Recent Blogroll Additions……
[...]usually posts some very interesting stuff like this. If you’re new to this site[...]……
Sites we Like……
[...] Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose [...]……